de.unkrig.commons.lang.crypto.PasswordAuthenticationStore Maven / Gradle / Ivy

Go to download

/*
 * de.unkrig.commons - A general-purpose Java class library
 *
 * Copyright (c) 2017, Arno Unkrig
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without modification, are permitted provided that the
 * following conditions are met:
 *
 *    1. Redistributions of source code must retain the above copyright notice, this list of conditions and the
 *       following disclaimer.
 *    2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the
 *       following disclaimer in the documentation and/or other materials provided with the distribution.
 *    3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote
 *       products derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
 * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

package de.unkrig.commons.lang.crypto;

import java.io.IOException;
import java.net.Authenticator;
import java.net.PasswordAuthentication;

import javax.security.auth.Destroyable;

import de.unkrig.commons.nullanalysis.Nullable;

/**
 * Stores username/password pairs, persistently or not. Suitable for being used with {@link Authenticator} and {@link
 * PasswordAuthentication}.
 */
public
interface PasswordAuthenticationStore extends Destroyable {

    /**
     * @return The least recently {@link #put(String, String) put} userName for the
     *         key, or {@code null} if a user name for the given key is not in this store
     */
    @Nullable String
    getUserName(String key);

    /**
     * @param userName Must equal the userName provided with {@link #put(String, String, char[])}
     * @return         The least recently {@link #put(String, String, char[]) put} password for the
     *                 key, or {@code null} if a password for the given key is not in this store;
     *                 the caller is responsible for clearing the returned {@code char[]}
     */
    @Nullable char[]
    getPassword(String key, String userName);

    /**
     * Updates the userName and removes the password for the given key. Depending on whether this
     * store is persistent or not, the new values will not or will be forgotten when the JVM exits.
     */
    void
    put(String key, String userName) throws IOException;

    /**
     * Updates the userName and the password for the given key. Depending on whether
     * this store is persistent or not, the new values will not or will be forgotten when the JVM exits.
     * 
     *   This method clears the password character array before it returns.
     * 
     */
    void
    put(String key, String userName, char[] password) throws IOException;

    /**
     * Removes both the user name and the password for the given key. Depending on whether this store is
     * persistent or not, the removal will not or will be forgotten when the JVM exits.
     */
    void
    remove(String key) throws IOException;

    /**
     * A password store that discards all data stored in it.
     */
    PasswordAuthenticationStore
    NOP = new PasswordAuthenticationStore() {
        @Override @Nullable public String getUserName(String key)                           { return null; }
        @Override @Nullable public char[] getPassword(String key, String userName)          { return null; }
        @Override public void             put(String key, String userName)                  {}
        @Override public void             put(String key, String userName, char[] password) {}
        @Override public void             remove(String key)                                {}

        @Override public void             destroy()                                         {}
        @Override public boolean          isDestroyed()                                     { return false; }
    };

}